I have a development web server that I need to add trust certificates on my local machine.
Http connections to server https://machine-name.a.b.local/ show an SSL issue.
This is the cert chain:
From a web browser, I can install the EFGH-SUBCA-CA cert but don't have the option to install the ABCD-CA root cert. So when I inspect the certs using the certlm snap-in or the browser, I see the message "Windows does not have enough information to verify the certificate"
Another thing I've tried is using PowerShell to create a new self-signed cert for the CA and place it in my machine's trusted root CAs. Then I create another self-signed cert for the sub-CA with the signer as the first CA and place it in my machine's intermediate CAs.
Inspecting these certs in the certlm snap-in shows they are both ok but the browser still shows the cert issue.
What am I doing wrong?